Overview
overview
8Static
static
8GoogleMeet...rk.exe
windows10-2004-x64
7GoogleMeet...rk.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...FC.dll
windows10-2004-x64
3$PLUGINSDI...FC.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-21h2-x64
3$PLUGINSDIR/nsSCM.dll
windows10-2004-x64
3$PLUGINSDIR/nsSCM.dll
windows11-21h2-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDI...ML.dll
windows11-21h2-x64
3AxInterop....ib.dll
windows10-2004-x64
1AxInterop....ib.dll
windows11-21h2-x64
1AxInterop.ViewerX.dll
windows10-2004-x64
1AxInterop.ViewerX.dll
windows11-21h2-x64
1CagService.exe
windows10-2004-x64
1CagService.exe
windows11-21h2-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-21h2-x64
1Core.XmlSe...rs.dll
windows10-2004-x64
1Core.XmlSe...rs.dll
windows11-21h2-x64
1Core.dll
windows10-2004-x64
1Core.dll
windows11-21h2-x64
1CsExec.Service.exe
windows10-2004-x64
1CsExec.Service.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/04/2026, 00:28
Behavioral task
behavioral1
Sample
GoogleMeet_At_work.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
GoogleMeet_At_work.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
AxInterop.MSTSCLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
AxInterop.MSTSCLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
AxInterop.ViewerX.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
AxInterop.ViewerX.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
CagService.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
CagService.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Common.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Common.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Core.XmlSerializers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Core.XmlSerializers.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
CsExec.Service.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
CsExec.Service.exe
Resource
win11-20260130-en
General
- Target CagService.exe
- Size 19KB
- Sample260417-asvzpsc15k
- SHA256 eb209f6eccdebca405183de5f24ef34ee8c850615e6ab9f086f5a4fb6851e071
- MD5 975354d0a22c4a77e27624bfcb05777e
- SHA1 d4e71d00d95dede191e1347dd4bf284908705cd2
- SHA512 ee2def7352f16f71c15c863e0f1722ba69e8a3a7eabd49e7bf4d03c369a462f2a403b8ee00ea018aa2cdf4f3a689d2a2fadce2b10ce51353e6737bb77097be22
- SSDEEP 384:KYMQoDoU+94X9nmhJUqkpf5ZTJ4yIE1m2Jo:loDoi8at1F1m
- TLSH T17B92D611A3E84B66F6F76F7559720A050E32FE5BA871D34C26A4004F2AB3B81C971777
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\cagerrors.dat
- Size 7KB
- SHA256 db875d6d44c731eb26ac9962782aff5ebde6e9d8a41bfdbab0e244b66101afee
- MD5 63ac3bc71f6478988ad90595b3beb644
- SHA1 52fe12b3bf260b77dca059c57f34c927eaff8273
- SHA512 4c39d2399b6ee0d8f84c9640fe33cee3c5166c4a5adaafc9c69b76a7d5503c0c4794c5d73f2adec54d57265fd7c1f889606121304a8075b660370c4999213c09
- SSDEEP 192:/4/M24/MG4/MY4/M54/M94/M+4/MmD4/MT4/MI:/P2PGPYP5P9P+PmDPTPI
- TLSH T1E0F18B21C1D54BF31A8116E47E03C8B95EF03A84500E7A2A9BFCA55BF7DDCEC65D2285
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 9293d08ace3bcbc0a21a6839e53636409a94b84b04bb7613fba143a8c35e7ea4
- MD5 e4c472e22e20a93c4c370b01a9d3b925
- SHA1 2cc9111d48df0b0e66c9c6c7ee49fccc421f9086
- SHA512 bd97cf450d268ec9d8ff24cfc2c5e9978aaec0750c8339cc32a56fd6d6a0c10c5edc06637766f059c9aa607a4e6d29411b61c5591293a56673794c7c62f4ac20
- SSDEEP 96:PTacGoNQncGoNQOecGoNQPbcGoNQ1cGoNQtcGoNQjcGoNQv:P4McMUM+dM6M+MsMI
- TLSH T19AD1CE20C1E00FF1458316A8BD4385FA4EF03A45911F7A16ABFC699BF7C8CDC56B6286
- MD5 SHA1 SHA512 SSDEEP TLSH